[vbox-dev] CVE 2015-2594

[Gianfranco Costamagna]

Hi virtualbox developers,


today I noticed the above CVE in Debian.


We are packaging right now 4.3.30 and 5.0.0 that should fix the CVE, but I would like to know if a minimal patch is available, in order to do the security uploads for Debian and Ubuntu stable releases.


Can you please share a patch/diff or whatever?


thanks,


Gianfranco, for Debian pkg-virtualbox team.


(sorry for the formatting and typos, I'm on mobile)

Sent from Yahoo Mail on Android

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20150714/77035006/attachment.html>